ForgeRock Directory Services version 7.4 has been released. According to the release notes, changes in this release include:
- Added a new dsrepl disaster-recovery mechanism for safer disaster recovery procedures
- Removed the existing dsrepl start-disaster-recovery and dsrepl end-disaster-recovery commands
- Updated HDAP support to provide the ability to authenticate with a bearer tokens
- Updated the server so that it can immediately start maintaining new indexes for previously unused attributes
- Improved the efficiency of using equality indexes for presence searches
- Expanded the ability to use VLV indexes for some kinds of search requests
- Updated access log messages to better reflect when a search is unindexed
- Added processing time metrics for persistent searches
- Updated the server to improve resource limit evaluation for requests using proxied authorization
- Added support for Java 17 and Java 21
- Removed support for Java 11
- Added support for Amazon Linux 2023
- Added a dsrepl decode-csn command
- Included the hostname in the supportextract archive file
- Introduced changes to prevent direct upgraes from 7.4 instances using data encryption with AES/GCM
- Fixed an internal error resulting from certain kinds of unknown requests
- Fixed a potential schema violation resulting from an etag in the schema configuration entry
- Fixed an issue in which a TOO_LATE replication status would not mark a server as unhealthy
- Fixed an issue with the ds-mon-receive-delay metric
- Fixed an issue with dsrepl initialize when a custom schema file only includes sync state entries
- Fixed an issue in which authenticating using the REST API did not properly honor the force-change-on-add configuration
- Removed support for SNMP monitoring
- Removed the already-deprecated /admin and /api endpoints from newly created server instances
- Made a number of changes to the server’s plugin API, some of which may affect existing plugins
- Deprecated the legacy Prometheus metrics format in favor of a new format
- Deprecated a number of existing Prometheus metrics in favor of new metrics with improved names